/* CX-Feedback — Privacy policy. */

function App() {
  useReveal();
  return (
    <>
      <Header />
      <main id="main">
        <PageHero
          eyebrow="Legal"
          h1="Privacy policy."
          sub="How we handle personal data and tenant data. Plain English. UK GDPR compliant. EU-hosted."
          primary={null}
        />
        <article className="py-16 lg:py-20 bg-white">
          <div className="max-w-prose-wide mx-auto px-5 sm:px-8 space-y-10">
            <p className="text-[14px] text-slate-500 reveal">Last updated: 2026-05-22. We review this policy at least once a year.</p>

            <section className="reveal">
              <h2 className="h2 mb-4">Who we are</h2>
              <p className="body-md text-slate-700">
                CX-Feedback is a product of Target Applications Ltd, a company registered in Scotland. Registered office: Centura Court, Hillington Park, Glasgow G52 4PR. We are the data controller for the personal data we collect through this website.
              </p>
            </section>

            <section className="reveal">
              <h2 className="h2 mb-4">What we collect on this website</h2>
              <ul className="space-y-2">
                <li className="flex items-start gap-3 text-[15px] text-slate-700"><IconCheck size={18} className="text-blue-600 mt-0.5" /> The details you submit through the Book-a-call and Contact forms: name, organisation, work email, optional phone number, optional message.</li>
                <li className="flex items-start gap-3 text-[15px] text-slate-700"><IconCheck size={18} className="text-blue-600 mt-0.5" /> Your email address if you subscribe to the fortnightly note.</li>
                <li className="flex items-start gap-3 text-[15px] text-slate-700"><IconCheck size={18} className="text-blue-600 mt-0.5" /> Anonymised analytics about which pages you visited and how you got here. We use a cookieless, EU-hosted analytics service.</li>
              </ul>
            </section>

            <section className="reveal">
              <h2 className="h2 mb-4">Why we hold it, and how long</h2>
              <p className="body-md text-slate-700 mb-3">
                Lead form submissions are used to reply to you about CX-Feedback. They are held in our CRM for as long as you remain a relevant business contact. Newsletter subscriptions are used only to send the fortnightly note; unsubscribe in one click and we delete the address.
              </p>
              <p className="body-md text-slate-700">
                We do not sell your data. We do not pass it to third-party advertisers. We do not enrich it with data from external brokers.
              </p>
            </section>

            <section className="reveal">
              <h2 className="h2 mb-4">Where we hold it</h2>
              <p className="body-md text-slate-700">
                In EU data centres, currently in the West Europe Azure region. Backups within the same region. No personal data leaves the European Economic Area without your explicit authorisation.
              </p>
            </section>

            <section className="reveal">
              <h2 className="h2 mb-4">Your rights</h2>
              <p className="body-md text-slate-700">
                Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data. Write to <a href="mailto:dpo@cx-feedback.co.uk" className="text-blue-600 hover:text-blue-700 font-semibold">dpo@cx-feedback.co.uk</a> and we will respond within one working day, and act within one month.
              </p>
            </section>

            <section className="reveal">
              <h2 className="h2 mb-4">Customer (platform) data</h2>
              <p className="body-md text-slate-700">
                This policy covers the marketing website only. For tenant data held inside the CX-Feedback platform, our customer (your landlord) is the data controller and we are the data processor. See your contract with us and our Data Processing Addendum for the full position.
              </p>
            </section>

            <section className="reveal">
              <h2 className="h2 mb-4">How to complain</h2>
              <p className="body-md text-slate-700">
                If you are not happy with how we have handled your personal data, write to us first at dpo@cx-feedback.co.uk and give us the chance to resolve it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
              </p>
            </section>
          </div>
        </article>
      </main>
      <Footer />
    </>
  );
}

const root = ReactDOM.createRoot(document.getElementById('root'));
root.render(<App />);